Privacy Policy

This notice explains personal information handled for RealShoot Pro at realshoot.pro. It is information about our practices, not consent to optional processing. For privacy questions or requests, use our public support form; you do not need an account.

Information, sources and purposes

• Accounts: your email, profile details you provide, sign-in codes and sessions let us verify your identity and operate your account. Saved prompt text and titles, preferences, credit balances and usage records support the features you select.
• Photos and prompts: you provide images, instructions and edits for AI processing. Images may contain people, property details and embedded metadata. Only submit content you are entitled to use and avoid unnecessary sensitive information.
• Payments: Stripe supplies customer and subscription identifiers, plan, payment and renewal status. Stripe collects payment details through its checkout and portal. Our application does not store your full card number.
• Support and invitations: we receive your name, email, subject and message through support. If someone invites you, they supply your email and their sender details for that invitation.
• Technical information: hosting, security and diagnostics process IP addresses, requests, errors and browser information to deliver the site, prevent abuse and investigate faults. Credit and payment events support accounting and dispute resolution.

AI processing and recipients

Photos and prompts submitted for generation or editing are sent through OpenRouter to the image-model provider, currently Google's Gemini image models. These providers receive the content needed to process the request. Their processing and retention are separate from storage in our application. Temporary app storage does not mean that every provider deletes all records immediately. Our application does not operate a training pipeline using your uploaded photos.

Cloudflare provides hosting, database, temporary object storage, network protection and email sending. Stripe processes payments. Linear receives support-form details. Operational emails about new accounts and first paid subscriptions go to the service operator's Google-hosted inbox and include account and billing information, not a photo library. Email delivery also involves the recipient's mail provider.

Provider information: Cloudflare, OpenRouter, Google, Stripe and Linear. These notices do not replace our responsibility for processing we control. Information may also be disclosed where legally required or necessary to address fraud, security incidents or legal claims.

Photo storage and other retention

Normal interactive generation and editing send image bytes for processing and return the result to your browser without saving a photo copy in our object storage. Download results you want to keep; this is not a permanent photo library.

Compatibility uploads and background jobs can use temporary storage. Temporary uploads normally expire after one hour and are removed by scheduled cleanup, not at an exact instant. Active jobs, retries and cleanup failures can delay removal. Completed, failed or cancelled job photo payloads become eligible for cleanup after one hour; unfinished jobs and pending credit refunds may remain longer.

Account information and saved prompts remain while needed for your account. Account deletion removes the app account and associated records, but does not itself erase Stripe's payment records, support tickets or emails already delivered. A deleted-account email record is retained for abuse prevention; the free-trial eligibility check uses the preceding 365 days, which is not an automatic deletion deadline for that record.

Operational, payment, support and security records have different retention needs, including resolving requests, legal recordkeeping and claims. We do not promise a single deletion deadline for all systems. Ask support about specific retained records or deletion. Copies downloaded by you or another recipient are outside our app's cleanup process.

Cookies and browser storage

The essential sign-in cookie, ai_stager_sid, keeps you signed in for up to 90 days and can be renewed during use. Signing out ends that session. Local browser caches and a recovery flag support loading and updating the app; they are not a server-side photo library. Blocking essential cookies can prevent sign-in.

The site uses Cloudflare's performance and usage beacon. PostHog analytics is not enabled. Optional first-party usage measurement is off until you enable it in Usage choices. It measures only reviewed public page types, not article identities, prompts, images, account details or billing data. A signed browser cookie covers consented pseudonymous records for up to 30 days. Global Privacy Control and Do Not Track prevent collection. Withdrawal stops new collection while cookie-covered export and erasure remain available. Clearing cookies or changing browsers removes that access; aggregate admission counters remain.

Legal grounds and international processing

Where data-protection law requires a legal basis, account, image and billing processing serves your requested contract; security, abuse prevention and service administration serve legitimate interests; legally required records serve legal obligations. Processing requiring consent must rely on a separate choice, not merely visiting this page. Withholding information necessary for a feature can prevent that feature from working.

Providers may process information outside your country. Applicable international-transfer requirements still apply. Contact support for the recipients and safeguards relevant to your data. This notice does not assert that a particular transfer agreement or local storage arrangement has been verified for every provider.

Your choices and rights

Manage saved prompts and preferences in the app, subscriptions from Billing, and account deletion in account settings. For access, a copy of your data, correction, deletion, restriction, portability or an objection to processing, use support with the subject “Privacy request”. We may need proportionate identity verification before releasing or changing records.

Rights depend on applicable law and circumstances. Where consent is the basis, you may withdraw it without affecting earlier lawful processing. Where California privacy law applies, rights can include knowing the categories, sources, purposes and recipients of personal information, correction, deletion, opting out of sale or sharing and limiting specified uses of sensitive information. Exercising applicable rights must not result in unlawful discrimination.

We must respond within applicable legal deadlines and explain any lawful exception. You may complain to your local data-protection authority or seek available legal remedies. The service is not intended to make legally significant decisions about people solely through automated image processing.

Safety, children and changes

Security controls reduce risk but cannot guarantee absolute security. Do not send passwords, full card details or unnecessary sensitive documents in support requests. The service is intended for adults capable of entering a contract, not children. Contact support if you believe a child's information was submitted.

We will update the date above when this notice changes and provide additional notice or obtain consent where required. Mandatory rights are not reduced by changes to this page. See also our Terms of Service.